Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa
File:                     225c70bf-4322-3691-bda9-5b4b15a20e82.roa (raw, json)
Hash identifier:          UeBaVzsHiN8gX315ScnNTuwd8jwaBu7mvhTdOq3ezeM=
Subject key identifier:   E2:FB:63:48:6C:C4:FE:FB:45:5B:65:27:5F:52:E5:0F:62:AF:FB:C8
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584D9E500997AF84CA0E66E05A00
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     36103
IP address blocks:        23.88.160.0/20 maxlen: 20
                          64.77.208.0/23 maxlen: 23
                          68.70.232.0/22 maxlen: 22
                          68.70.236.0/24 maxlen: 24
                          68.70.247.0/24 maxlen: 24
                          68.70.253.0/24 maxlen: 24
                          68.70.254.0/24 maxlen: 24
                          74.50.216.0/21 maxlen: 21
                          97.75.224.0/23 maxlen: 23
                          198.135.172.0/22 maxlen: 22
                          204.225.16.0/20 maxlen: 20
                          208.101.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:09:97:af:84:ca:0e:66:e0:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=81e56cae-f9ba-4b66-81e5-ca5dd68b234d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:75:6d:73:66:1e:2e:ba:90:20:d6:c1:6b:
                    6a:c3:54:de:ef:7e:56:09:a6:4d:cd:f6:3e:bf:37:
                    db:d0:0a:56:28:4f:c2:2d:3d:4e:a2:bf:fe:5e:49:
                    11:70:98:5b:f1:94:e2:e5:a8:53:bc:d9:3a:a4:b7:
                    0a:b6:07:e1:47:ea:af:53:6f:94:c3:15:12:1d:a9:
                    cc:eb:54:e5:24:45:85:cd:1f:1d:88:2f:50:b3:51:
                    e8:2e:85:1a:c1:7c:7c:5e:bc:a6:24:eb:cd:bd:54:
                    4c:80:c6:67:9b:10:a3:0e:7f:6e:11:23:0d:13:56:
                    0b:98:1b:42:dd:98:00:7e:f1:25:42:7a:75:92:4e:
                    b4:88:d4:c0:11:79:d7:0e:32:f6:4b:42:a1:d8:95:
                    85:62:96:ee:14:3e:7e:28:d5:54:0c:20:76:e7:e2:
                    03:84:06:73:ed:a3:8c:93:58:e8:c6:29:0c:89:df:
                    15:78:7d:44:d4:5f:96:11:bc:52:c7:82:db:3b:f3:
                    28:69:d8:24:f3:6b:8d:f8:f7:5b:38:aa:bd:62:48:
                    ae:67:c4:ae:cc:7e:25:e2:cc:dc:a0:ce:df:e9:e0:
                    6c:42:54:2d:f7:3d:c4:13:c4:a2:23:3f:d7:78:ad:
                    8d:a8:44:24:2f:46:62:7d:2b:bf:8a:e5:23:53:c8:
                    0c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:63:48:6C:C4:FE:FB:45:5B:65:27:5F:52:E5:0F:62:AF:FB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.160.0/20
                  64.77.208.0/23
                  68.70.232.0-68.70.236.255
                  68.70.247.0/24
                  68.70.253.0-68.70.254.255
                  74.50.216.0/21
                  97.75.224.0/23
                  198.135.172.0/22
                  204.225.16.0/20
                  208.101.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:f1:fe:ba:df:e0:d2:8e:30:57:03:62:8d:16:cd:68:52:
         66:5c:53:8e:2d:1b:cd:c8:99:55:fd:97:85:58:6d:a1:1a:23:
         7a:45:f4:df:de:a3:79:5c:2d:55:7d:06:d8:0f:b6:30:ff:57:
         61:bc:49:82:89:fd:b4:80:dd:f6:ca:e5:04:d2:95:38:45:6b:
         8c:70:96:a8:fd:04:16:70:ab:ab:ed:51:e3:78:e0:e8:b7:ef:
         e6:80:78:11:da:9c:84:17:e3:0e:f6:d6:2b:d5:89:5a:e7:fc:
         da:44:48:59:d4:d5:40:93:1b:2b:79:51:b6:58:1c:f6:69:a6:
         fc:c1:0a:62:a8:ff:f3:bb:42:8d:ad:43:4e:00:53:ba:1e:57:
         35:75:d6:77:49:ce:17:d8:6f:56:0d:8d:6e:9c:8f:63:e8:36:
         a0:06:b8:ee:ff:f3:e4:a2:0a:35:bc:ca:8f:57:3e:6f:17:1a:
         4c:cc:2a:ee:bf:79:56:06:40:16:e8:30:3b:1a:20:ee:fd:86:
         78:46:86:94:c4:36:30:d2:80:4c:06:e6:5c:9a:fb:f5:34:d9:
         99:67:30:84:a9:c1:9b:2f:8a:2e:29:14:d4:4c:ea:24:e0:76:
         f2:66:a9:a3:04:0c:3b:a6:d5:5e:1e:28:8d:65:83:a4:e3:f4:
         a8:15:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:42:16 2026 by rpki-client